用图像风格控制模型访问,防止未经授权使用。
A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing
- 将图像风格作为许可证,仅允许特定风格数据激活模型。
- 在MNIST、CIFAR-10等数据集上保持高精度且有效阻断非法访问。
- 适合需要保护模型版权与终端数据隐私的边缘计算场景。
随着边缘计算的普及和深度学习模型的广泛应用,模型与数据面临日益严峻的安全与隐私威胁。攻击者可通过多种手段非法获取模型或滥用数据,导致知识产权侵权与隐私泄露。现有访问控制技术多依赖传统加密与认证,灵活性不足;尽管已有模型水印技术用于所有权标识,但难以主动防范未授权访问。为此,本文提出一种面向边缘计算环境的新型模型访问控制方法,利用图像风格作为许可机制,将风格识别嵌入模型运行框架,使模型仅对具有特定风格的数据正确推理,对其他数据无效。该方法通过限制输入数据,既防止攻击者非法访问模型,又提升终端设备数据隐私性。在MNIST、CIFAR-10和FACESCRUB等基准数据集上的实验表明,该方法能有效阻止未授权访问,同时保持模型准确率,并具备强抗伪造许可证与微调攻击能力,验证了其可用性、安全性与鲁棒性。
原文摘要 · Abstract (English)
With the widespread adoption of edge computing technologies and the increasing prevalence of deep learning models in these environments, the security risks and privacy threats to models and data have grown more acute. Attackers can exploit various techniques to illegally obtain models or misuse data, leading to serious issues such as intellectual property infringement and privacy breaches. Existing model access control technologies primarily rely on traditional encryption and authentication methods; however, these approaches exhibit significant limitations in terms of flexibility and adaptability in dynamic environments. Although there have been advancements in model watermarking techniques for marking model ownership, they remain limited in their ability to proactively protect intellectual property and prevent unauthorized access. To address these challenges, we propose a novel model access control method tailored for edge computing environments. This method leverages image style as a licensing mechanism, embedding style recognition into the model's operational framework to enable intrinsic access control. Consequently, models deployed on edge platforms are designed to correctly infer only on license data with specific style, rendering them ineffective on any other data. By restricting the input data to the edge model, this approach not only prevents attackers from gaining unauthorized access to the model but also enhances the privacy of data on terminal devices. We conducted extensive experiments on benchmark datasets, including MNIST, CIFAR-10, and FACESCRUB, and the results demonstrate that our method effectively prevents unauthorized access to the model while maintaining accuracy. Additionally, the model shows strong resistance against attacks such as forged licenses and fine-tuning. These results underscore the method's usability, security, and robustness.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。